Google Xml Sitemaps Project

google_xml_sitemaps_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Google Xml Sitemaps

google_xml_sitemaps

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-25088 1Google Xml Sitemaps Project 1Google Xml Sitemaps Jun 17, 2026 Jun 20, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the...Show more The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2018-16204 1Google Xml Sitemaps Project 1Google Xml Sitemaps Nov 21, 2024 Jan 9, 2019 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-25088

1Google Xml Sitemaps Project

1Google Xml Sitemaps

Jun 17, 2026

Jun 20, 2022

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the...Show more

CVE-2018-16204

1Google Xml Sitemaps Project

1Google Xml Sitemaps

Nov 21, 2024

Jan 9, 2019

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.